Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
skandshus
Advisor
Advisor

Updateable object Geo-Location wrong Telia Ip address

I am seeing ISP owned Ip adresses from Telia which all of the sudden is being flagged as swedish even though they are supplied by the danish part of the ISP

https://whatismyipaddress.com/ip/62.199.210.98


does anybody know where that's supposed to be reported? i could create a TAC case, but it seems like a big thing

 

 

0 Kudos
14 Replies
G_W_Albrecht
Legend Legend
Legend

No, that is the correct way. Otherwise correction could take longer as CP uses Maxmind but updates less often. See sk126172: Configuring Geo Policy using Updatable Objects in R80.20 and higher

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
skandshus
Advisor
Advisor

alright

0 Kudos
the_rock
Legend
Legend

I went on 7 different geo location sites and ALL of them report it as Denmark.

skandshus
Advisor
Advisor

That's what im seeing too but the smartconsole doesnt

0 Kudos
the_rock
Legend
Legend

I guess you can always make an exception for that IP address if needed, but to change it to show as Denmark (great country btw :)), which it should, then it may warrant TAC case, as every website I found shows it correctly.

0 Kudos
Danny
Champion Champion
Champion

Update your IP2Country database with this one-liner.

skandshus
Advisor
Advisor

when it doe the one-liner it output's "Updating Iptocountry requires CPSTOP! Executing?

anything i press after that makes it say "abort! and then it doesnt look like anything is happening^

Edit: nevermind. Enter was the secret magic button to press, now it started running.. guess ill know in a few minutues if the update corrected it from Swedish to Danish adresse location 🙂

0 Kudos
skandshus
Advisor
Advisor

It did update though, but the problem is still there, showing a swedish flag= blocking traffic originating from those ip if i filter on source and set danish ip adresses

0 Kudos
G_W_Albrecht
Legend Legend
Legend

Open a TAC case - this is the typical issue, CP lagging behind with its weekly update and keeping wrong info...

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
_Val_
Admin
Admin

Please open a TAC case and let them fix it.

0 Kudos
skandshus
Advisor
Advisor

1.png

0 Kudos
Danny
Champion Champion
Champion

Regarding to MaxMind, it's Denmark.

image.png

As Check Point relies on MaxMind, Check Point should show Denmark, too.

You can verify on your Management that your IP2Country database is up-to-date with our ccc script.

Your gateways should update themself automatically every 2 hours, if not check sk84801.

However, you can always investigate deeper by looking into the IP2Country files yourself.

On management:

image.png

the_rock
Legend
Legend

Im trying to think logically how I could verify this in my own R81.10 or R81.20 lab in the logs, since I will never see this IP in smart console logs, as Im in Canada and we would not be "associated"with this IP address, for the lack of the better term...I did run command @Danny provided and it does indeed show Denmark. 

0 Kudos
_Val_
Admin
Admin

Is it resolved for you now, or do you still need assistance?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events